Skip to content

Latest commit

 

History

History
82 lines (65 loc) · 5.86 KB

README.md

File metadata and controls

82 lines (65 loc) · 5.86 KB
Raw

terraform-fastly-service: A fastly service with Terraform

The terraform-fastly-service is used to setup a fastly service

It is based on fastly terraform provider and includes an easy and fast way to generate fastly services with the following features included, in case those are desired as well. They can be performed with simple configuration changes in the terraform-fastly-service:

  • Fastly service with TLS using AWS Route53
  • Add Varnish Configuration Language - VCL snippets - to the fastly service
  • Fastly service with director
  • Fastly service with shielding
  • Fastly service monitoring with Datadog

With parameterization of the above use cases you can get your base fastly service setup with several features.

How to use it

Once you have the terraform-fastly-service you need to provide the correct credentials for the fastly provider and aws provider

 export FASTLY_API_KEY="my-fastly-api-key-xxx"
 export AWS_REGION="my-aws-region"
 export AWS_ACCESS_KEY_ID="my-aws-access-key-id-xxx"
 export AWS_SECRET_ACCESS_KEY="my-aws-secret-access-key-xxx"
 export AWS_SESSION_TOKEN="my-aws-session-token-xxx"

Once you have set those credentials, let's explore the different features provided and how can they be performed with this module given the examples in use cases examples

Requirements

Name Version
terraform 1.0.6 or higher

Providers

Name Version
hashicorp/aws 5.20.0 or higher
fastly/fastly 5.6.0 or higher

Argument Reference

Name Description Type Default Required
domains Internet facing CDN domains for fastly service list [] yes
service_name Fastly service name string "" yes
director Backend's group director declaration. Ref: director bool false no
number_of_backends The port number on which the backends respond number 1 yes
port The port number on which the backends respond number 80 yes
use_ssl Whether or not to use SSL to reach the backends bool false yes
ssl_cert_hostname Overrides ssl_hostname, but only for cert verification. Does not affect SNI at all string "" yes
ssl_check_cert Check SSL certs bool false yes
ssl_sni_hostname Overrides ssl_hostname, but only for SNI in the handshake. Does not affect cert validation at all string "" yes
auto_loadbalance Indicates whether backend should be included in the pool of backends that requests are load balanced against bool false yes
max_connections Max connection per backend number 1000 yes
override_host The hostname to override the Host header string null no
shield Fastly Point of Presence (POP). Ref: shielding. Required if the image optimizer feature for image variations is used. If the shield parameter is set, the image_optimizer flag has to be included in the product_enablement list and be set to true string null no
product_enablement Additional fastly features that should be enabled. If image_optimizer is included in this list, the parameter shield is required too list [], thus Fastly defaults no
snippets VCL snippet's list configured for the service. Ref: snippets list [] no
request_settings Settings used to customize Fastly's request in the exposed service handling. Ref: request settings list [{ name = "force_ssl", force_ssl = true }] no
logging_datadog Datadog configuration for fastly service monitoring integration for pushing logs if needed list [] no
service_force_destroy Services that are active cannot be destroyed. In order to destroy the Service must be true, otherwise false bool true yes
tls_certificate_authority The entity that issues and certifies the TLS certificates string "lets-encrypt" yes
tls_force_update Always update even when active domains are present bool true yes
tls_force_destroy Always delete even when active domains are present. bool true yes
route_53_record AWS record configuration for TLS fastly service object null yes
route_53_validation TLS validation in AWS for fastly service object null yes
enable_compression Enable compression for HTTP content (based on Content-Type) bool false no
compression_content_types List of HTTP Content-Type value for which compression should be enabled list [], thus Fastly defaults no
compression_extensions List of file extensions for which HTTP compression should be enabled list [], thus Fastly defaults no
connect_timeout How long to wait for a timeout in milliseconds number 1000 no
first_byte_timeout How long to wait for the first bytes in milliseconds number 15000 no
between_bytes_timeout How long to wait between bytes in milliseconds number 10000 no

License

Dual-licensed under both the Magnolia Network Agreement and the GNU General Public License. See LICENSE for full details.